Malumunuz son 1 senedir ICS Defense adında bir kuruluşta çalışıyorum. Her ne kadar "Savunma Sanayii" kuruluşu olarak gözüküyor olsakta amacımız "EKS(Endüstriyel Kontrol Sistemleri)", ingilizce karşılığı ile "ICS(Industrial Control Systems)" için siber güvenlik ürünleri geliştirmek ve danışmanlık vermek. Şu sıralar ICS Sight adında bir geliştirmekteyiz.

Tahmin edeceğiniz üzere bu alanda globalde tek veya ilk firma değiliz. Ancak treni yakalamaya çalışan butik bir ar-ge firmasıyız. Hal böyle olunca hem çalışma arkadaşlarımızı, hem ofis ortamımızı, hem de mümkün mertebe şartlarımızı iyileştirmek üzere yola çıktık. İtiraf etmek gerekirse geliştirme ekibi olarak Türkiye ortalamasının üstündeyiz.

Ekibe aldığımız her arkadaşın mühendis olmasına rağmen farklı hobilerle uğraştığını fark ettik. Kimisi youtuber, kimisi ağaç işleriyle uğraşıyor, kimisi sinyal istihbaratı ile uğraşıyor, kimisi 3b çizim yapıyor. Böyle kaliteli bir ekip olunca ister istemez kendimizi geliştirmeyi ve güncel kalmayı seçmek boynumuzun borcu oluyor.

Bir gün yine hararetli sprint kapanışının akşamında bir kitap kafede otururken, bir süre önce kurmayı planladığımız şirket kitaplığımıza neler alabileceğimizi konuştuk. Öneriyle ben de twitter üzerinden bir çağrıda bulundum. Bununla birlikte amacımız, yeni nesil girişimci arkadaşlara ofislerinde veya evlerinde bulundurmaları gereken kitapların bir listesini çıkarmaktı. Gayet güzel bir liste çıktığına inanıyorum.

Bu çağrıya kulak verip öneride bulunan ve destek veren arkadaşlara öncelikle teşekkür ederim. Listeye eklenen olursa bu sayfayı güncelleyeceğim.

Sıralı tam listeyi açıklıyorum :)

Not: Hesabı gizli olanları buraya ekleyemedim. Ayrıca aynı kitap önerilerini tekilleştirdim.

@backendeveloper

• Clean Code: A Handbook of Agile Software Craftsmanship - Robert C. Martin

@AliYukse1

• Business Model Generation: A Handbook for Visionaries, Game Changers, and Challengers - Alexander Osterwalder
• Start With Why - Simon Sinek
• Zero to One: Notes on Startups, or How to Build the Future - Peter Thiel
• The Lean Startup: How Today's Entrepreneurs Use Continuous Innovation to Create Radically Successful Businesses - Eric Ries
• Startup Hukuku - Mümtaz Hacıpaşaoğlu, Okan Şencan

@KodcuBurak

• Veri Yapıları ve Algoritmalar - Sadi Evren Şeker(kitabın adresini bulamadım)

@SinanAta

Kendi kitaplığını paylaşmış.

• http://sinanata.com/bookshelf/

@HuseyinKozan

• Thinking in C++, Volume 1, 2nd Edition - Bruce Eckel
  (Ücretsiz PDF versiyonu; https://www.micc.unifi.it/bertini/download/programmazione/TICPP-2nd-ed-Vol-one-printed.pdf)
• Thinking In C++ 2nd Edition, Volume 2 - Bruce Eckel
  (Ücretsiz PDF versiyonu; https://www.micc.unifi.it/bertini/download/programmazione/TICPP-2nd-ed-Vol-two-printed.pdf)
• Introduction to Design Patterns in C++ with Qt - Alan Ezust / Paul Ezust
  (Hypertext ücretsiz versiyonu; https://www.ics.com/designpatterns/book/index.html
  Türkçe ücretsiz versiyonu; https://ufukuzun.wordpress.com/yayinlarim/qt-4-ile-c-gui-programlama/)

@sedatsevgili

• Fikir Fabrikası, Bell Laboratuvarları ve Amerikan Yenilikçiliği'nin Altın Çağı - John Gertner(Çevirmen: Mehveş Draz)
• Hackers ve Painters - Paul Graham
• Algorithms to Live By: The Computer Science of Human Decisions - Brian Christian, Tom Griffiths

@epaprat

• Rework - Jason Fried, David Heinemeier Hansson
• Sprint: How to Solve Big Problems and Test New Ideas in Just Five Days - Jake Knapp, John Zeratsky, Braden Kowitz

@fatih

• Designing Data-Intensive Applications - Martin Kleppmann

@bircanhanci

• Girişimcinin El Kitabı - Bob Dorf, Steve Blank

@milikkan

• Refactoring: Improving the Design of Existing Code - Martin Fowler, Kent Beck, John Brant, William Opdyke, Don Roberts, Erich Gamma
• The Pragmatic Programmer: your journey to mastery, 20th Anniversary Edition (2nd Edition) - David Thomas, Andrew Hunt
• Learning Agile: Understanding Scrum, XP, Lean, and Kanban - Jennifer Greene, Andrew Stellman
• The Phoenix Project: A Novel about IT, DevOps, and Helping Your Business Win - Gene Kim, George Spafford, Kevin Behr
• Head First Design Patterns: A Brain-Friendly Guide - Elisabeth Robson, Kathy Sierra, Eric Freeman, Bert Bates
• Unit Testing Principles, Practices, and Patterns - Vladimir Khorikov

@baskindev

Tavsiye kitapların yer aldığı bir bağlantı paylaşmış.

• On the shoulders of the giants

@pioneerhfy

• Hacking: The Art of Exploitation - Jon Erickson
• Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software - Michael Sikorski, Andrew Honig
• The Shellcoder's Handbook: Discovering and Exploiting Security Holes - Chris Anley, John Heasman, Felix Lindner, Gerardo Richarte
• Understanding the Linux Kernel - Daniel P. Bovet, Marco Cesati

@EmreSevinc

• Database Internals: A deep-dive into how distributed data systems work - Alex Petrov
• Database Reliability Engineering: Designing and Operating Resilient Database Systems - Laine Campbell, Charity Majors

Photo Credits:

Books Door Entrance - Nino Carè
https://pixabay.com/photos/books-door-entrance-culture-1655783/

• Software Architecture is Overrated, Clear and Simple Design is Underrated
  https://blog.pragmaticengineer.com/software-architecture-is-overrated/
• Algo - 101+ coding interview problems with detailed solutions, test cases, and program analysis
  https://github.com/hoanhan101/algo
• DevOps terms: 10 advanced concepts to know
  https://enterprisersproject.com/article/2019/9/devops-terms-10-advanced
• 30 Linux Permissions Exercises for Sysadmins
  https://devconnected.com/30-linux-permissions-exercises-for-sysadmins/
• Input Output Redirection on Linux Explained
  https://devconnected.com/input-output-redirection-on-linux-explained/
• Traefik 2.0
  https://blog.containo.us/traefik-2-0-6531ec5196c2
• If you’re not using SSH certificates you’re doing SSH wrong
  https://smallstep.com/blog/use-ssh-certificates/
• API Security Checklist - Checklist of the most important security countermeasures when designing, testing, and releasing your API
  https://github.com/shieldfy/API-Security-Checklist
• Site Reliability Engineer (SRE) Interview Preparation Guide
  https://github.com/mxssl/sre-interview-prep-guide
• Building Container Images Securely on Kubernetes
  https://blog.jessfraz.com/post/building-container-images-securely-on-kubernetes/
• DevOps-Guide - DevOps Guide from basic to advanced with Interview Questions and Notes
  https://github.com/Tikam02/DevOps-Guide
• Pack Your Bags – Systemd Is Taking You To A New Home
  https://hackaday.com/2019/10/16/pack-your-bags-systemd-is-taking-you-to-a-new-home/
• Kubernetes for Full-Stack Developers
  https://www.digitalocean.com/community/curriculums/kubernetes-for-full-stack-developers
• How To Corrupt An SQLite Database File
  https://sqlite.org/howtocorrupt.html
• A Very Basic Introduction to AES-256 Cipher
  https://hackernoon.com/very-basic-intro-to-aes-256-cipher-qxr32yk
• Intelligent DNS based load balancing at Dropbox
  https://blogs.dropbox.com/tech/2020/01/intelligent-dns-based-load-balancing-at-dropbox/
• eBay Rolls Out Kubernetes for Performance-Sensitive Search Operations
  https://thenewstack.io/ebay-rolls-out-kubernetes-for-performance-sensitive-search-operations/
• A collection of free single-purpose online tools for web developers...
  https://tiny-helpers.dev/
• Chaos Mesh - Your Chaos Engineering Solution for System Resiliency on Kubernetes
  https://pingcap.com/blog/chaos-mesh-your-chaos-engineering-solution-for-system-resiliency-on-kubernetes/
• DevOps Exercises - Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic, Network, Virtualization
  https://github.com/bregman-arie/devops-exercises
• Multipath TCP Support Is Working Its Upstream - First Bits Landing With Linux 5.6
  https://www.phoronix.com/scan.php?page=news_item&px=Linux-5.6-Starts-Multipath-TCP
• MySQL Challenge: 100k Connections
  https://www.percona.com/blog/2019/02/25/mysql-challenge-100k-connections/
• Systemd service sandboxing and security hardening 101
  https://www.ctrl.blog/entry/systemd-service-hardening.html
• Making Python Programs Blazingly Fast
  https://martinheinz.dev/blog/13
• Auto-restart a crashed service in systemd
  https://ma.ttias.be/auto-restart-crashed-service-systemd/
• How to Run Commands on Multiple Linux Hosts Using PSSH
  https://www.freecodecamp.org/news/running-commands-linux-hosts-using-pssh/
• Introduction to Vitess on Kubernetes for MySQL – Part I of III
  https://www.percona.com/blog/2020/01/13/introduction-to-vitess-on-kubernetes-for-mysql-part-i-of-iii/
• CNCF Cloud Native Interactive Landscape
  https://landscape.cncf.io/
• CacheOut - A new Intel CPU vulnerability
  https://cacheoutattack.com/
• Introducing Zeitgeist: dependency management for DevOps
  https://blog.florentdelannoy.com/blog/2020/introducing-zeitgeist/
• Awesome Scalability - The Patterns of Scalable, Reliable, and Performant Large-Scale Systems
  http://awesome-scalability.com/
• How to build a Search-Engine with Common Unix-Tools
  https://www.iaria.org/conferences2018/filesDBKDA18/AndreasSchmidt_Tutorial_SearchEngine.pdf
• Awk - A Tutorial and Introduction
  https://www.grymoire.com/Unix/Awk.html
• PostgresqlCO - PostgreSQL configuration for humans
  https://postgresqlco.nf/
• Scaling to 100k Users
  https://alexpareto.com/scalability/systems/2020/02/03/scaling-100k.html
• On Pair Programming
  https://martinfowler.com/articles/on-pair-programming.html
• Scalene - A high-performance, high-precision CPU and memory profiler for Python
  https://github.com/emeryberger/scalene
• Prometheus For Beginners
  https://itnext.io/prometheus-for-beginners-5f20c2e89b6c
• Scripting tmux
  https://www.arp242.net/tmux.html
• What You Probably Didn’t Know About Sudo
  https://aster.cloud/2019/12/17/what-you-probably-didnt-know-about-sudo/
• How LinkedIn customizes Apache Kafka for 7 trillion messages per day
  https://engineering.linkedin.com/blog/2019/apache-kafka-trillion-messages
• Internet Exchange Map
  https://www.internetexchangemap.com/
• Finding MySQL Scaling Problems Using perf
  https://www.percona.com/community-blog/2020/02/05/finding-mysql-scaling-problems-using-perf/
• iHateRegex - The Regex Cheat Sheet
  https://ihateregex.io
  
  

Açık Kaynak Kodlu Projeler

• Osync - A robust two way (bidirectional) file sync script based on rsync with fault tolerance, POSIX ACL support, time control and near realtime sync
  http://www.netpower.fr/osync
• Git Quick Stats - A simple and efficient way to access various statistics in git repository.
  https://github.com/arzzen/git-quick-stats
• Kubesphere - Easy-to-use Production Ready Container Platform
  https://github.com/kubesphere/kubesphere
• Bat - A cat(1) clone with wings.
  https://github.com/sharkdp/bat
• Img - Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder.
  https://github.com/genuinetools/img
• OPNids - The first integration of Suricata IDS with a purpose-built Machine Learning Scripting Engine.
  https://www.opnids.io/
• DragonFly: Streaming Machine Learning Engine (MLE) for Network Threat Detection
  https://github.com/counterflow-ai/dragonfly-mle
• Universal Radio Hacker - investigate wireless protocols like a boss
  https://github.com/jopohl/urh
• Cheat - Create and view interactive cheatsheets on the command-line. It was designed to help remind *nix system administrators of options for commands that they use frequently, but not frequently enough to remember.
  https://github.com/cheat/cheat
• Astra - Automated Security Testing For REST API's
  https://github.com/flipkart-incubator/Astra
• Sops - Simple and flexible tool for managing secrets
  https://github.com/mozilla/sops
• Agones - Dedicated Game Server Hosting and Scaling for Multiplayer Games on Kubernetes
  https://agones.dev/
• Open Match - Flexible, extensible, and scalable video game matchmaking.
  https://open-match.dev/
• Jira Clone - A simplified Jira clone built with React/Babel (Client), and Node/TypeScript (API). Auto formatted with Prettier, tested with Cypress. http://jira.ivorreic.com
• RudderStack - Privacy and Security focused Segment-alternative, in Golang and React
  https://rudderstack.com/
• Fider - Open platform to collect and prioritize product feedback
  https://getfider.com/
• Daptin - GraphQL/JSON-API Headless CMS
  https://github.com/daptin/daptin
• HonSSH - Designed to log all SSH communications between a client and server.
  https://github.com/tnich/honssh
• DTail - Distributed DevOps tool for tailing, grepping, catting logs and other text files on many remote machines at once.
  https://github.com/mimecast/dtail
• Super Easy All-In-One DevOps Platform
  https://github.com/theonedev/onedev
• NebulaGraph - A truly distributed, linear scalable, lightning-fast open source graph database.
  https://nebula-graph.io
• Open Event Server - The Open Event Organizer Server to Manage Events
  https://github.com/fossasia/open-event-server
• GoatCounter - Simple web statistics. No tracking of personal data.
  https://www.goatcounter.com/
• Neko - A self hosted virtual browser (rabb.it clone) that runs in docker.
  https://github.com/nurdism/neko
• Sandy - A tiny "sandbox" to run untrusted code
  https://github.com/hobochild/sandy
• Murex - Bash-like $SHELL designed for greater commandline productivity and safer shell scripts
  https://github.com/lmorg/murex
• Tcpgoon - tcpgoon, maximum TCP connections tester
  https://github.com/dachad/tcpgoon
• Terrier - Image and Container analysis tool that can be used to scan Images and Containers to identify and verify the presence of specific files according to their hashes.
  https://github.com/heroku/terrier
• Kopano - 100% Open source collaboration tools: email, calendaring, Mattermost chat, webRTC video meetings, document collaboration with LibreOffice Online, integration with file storage services and more.
  https://kopano.io/
• Img - Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder.
  https://github.com/genuinetools/img
• Age - A simple, modern and secure encryption tool with small explicit keys, no config options, and UNIX-style composability.
  https://github.com/genuinetools/img
• MOSN - Powerful cloud-native proxy acts as a edge proxy or service mesh's data plane.
  https://mosn.io/
• CrossPlane - The open source multicloud control plane.
  https://crossplane.io/
• VictoriaMetrics - fast, cost-effective and scalable time series database, long-term remote storage for Prometheus
  https://victoriametrics.com/
• Smallsteps Certificates - A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
  https://smallstep.com/certificates/
• Gitbatch - Manage your git repositories in one place
  https://github.com/isacikgoz/gitbatch
• Glow - Render markdown on the CLI, with pizzazz!
  https://github.com/charmbracelet/glow
• Buf - A new way of working with Protocol Buffers.
  https://buf.build/
• Cassowary - Modern cross-platform HTTP load-testing tool written in Go
  https://github.com/rogerwelin/cassowary
• CoreDHCP - Fast, multithreaded, modular and extensible DHCP server written in Go
  https://coredhcp.io/
• Cantools - CAN BUS tools in Python 3.
  https://github.com/eerimoq/cantools
• Gter - A terminal for GUI apps (WIP)
  https://github.com/raoofha/gter
• Parsr - Transforms PDF, Documents and Images into Enriched Structured Data
  https://github.com/axa-group/Parsr
• Open-DMARC-Analyzer - Open Source DMARC Report Analyzer to be used with DMARC reports that have been parsed by John Levine's rrdmarc script or techsneeze's dmarcts-report-parser.
  https://github.com/userjack6880/Open-DMARC-Analyzer
• Tuptime - Report the historical and statistical real time of the system, keeping it between restarts. Like uptime command but with more interesting output.
  https://github.com/rfrail3/tuptime
• Firejail - Linux namespaces and seccomp-bpf sandbox
  https://firejail.wordpress.com/
  https://github.com/netblue30/firejail
• PrivateBin - A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
  https://privatebin.info/
  https://github.com/PrivateBin/PrivateBin
• 0x4447_product_s3_email - A serverless email server on AWS using S3 and SES
  https://github.com/0x4447/0x4447_product_s3_email
• SpiderFoot - The most complete OSINT collection and reconnaissance tool.
  https://github.com/smicallef/spiderfoot
• FabioLB - HTTP and TCP reverse proxy that configures itself with data from Consul.
  https://github.com/fabiolb/fabio
• Better Initramfs - Small and reliable initramfs solution supporting (remote) rescue shell, lvm, dmcrypt luks, software raid, tuxonice, uswsusp and more.
  https://github.com/slashbeast/better-initramfs
• ShellHub - Enables teams to easily access any Linux device behind firewall and NAT.
  https://shellhub-io.github.io/
• Whalebrew - Homebrew, but with Docker images
  https://github.com/whalebrew/whalebrew
• Zeitgeist - The language-agnostic dependency checker
  https://github.com/Pluies/zeitgeist
• Distri - 20x faster initramfs (initrd) from scratch
  https://michael.stapelberg.ch/posts/2020-01-21-initramfs-from-scratch-golang/
• Sovereign - A set of Ansible playbooks to build and maintain your own private cloud: email, calendar, contacts, file sync, IRC bouncer, VPN, and more.
  https://github.com/sovereign/sovereign
• EdgeDB - Combines the simplicity of a NoSQL database with relational model’s powerful querying, strictness, consistency, and performance.
  https://edgedb.com/
• OpenSnitch - GNU/Linux port of the Little Snitch application firewall
  https://github.com/evilsocket/opensnitch
• Ouroboros - Automatically update running docker containers with newest available image
  https://github.com/pyouroboros/ouroboros
• PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction
  https://github.com/Srinivas11789/PcapXray
• Tinfoil Chat - Onion-routed, endpoint secure messaging system
  https://github.com/maqp/tfc
• Pueue - A daemon for managing long running shell commands.
  https://github.com/Nukesor/pueue
• Direnv - unclutter your .profile
  https://direnv.net/
• Perkeep - Personal storage system for life: a way of storing, syncing, sharing, modelling and backing up content.
  https://perkeep.org/
• Cameradar - Hacks its way into RTSP videosurveillance cameras
  https://github.com/Ullaakut/cameradar
• Remark42 - Comment engine
  https://remark42.com/
• DevSpace - The Fastest Developer Tool for Kubernetes ⚡ Automate your deployment workflow with DevSpace and develop software directly inside Kubernetes.
  https://devspace.sh/
• DevicePlane - Open source device management for embedded systems and edge computing
  https://deviceplane.com/
• Authelia - The Cloud ready multi-factor single sign-on portal for your Apps
  https://www.authelia.com/
• Healthchecks - A Cron Monitoring Tool written in Python & Django
  https://github.com/healthchecks/healthchecks
• VirtScreen - Make your iPad/tablet/computer into a secondary monitor on Linux.
  https://github.com/kbumsik/VirtScreen
• Cortex - A horizontally scalable, highly available, multi-tenant, long term Prometheus.
  https://cortexmetrics.io/
• Short - URL shortening service written in Go and React
  https://github.com/short-d/short
• Pomerium - Authenticate, authorize, monitor, and secure user access to any application without a VPN.
  https://www.pomerium.io/
• Jellyfin - The Free Software Media System
  https://jellyfin.org/
• Bandwhich - Terminal bandwidth utilization tool
  https://github.com/imsnif/bandwhich
• Apache Pulsar - Open-source distributed pub-sub messaging system
  https://pulsar.apache.org/
• Outline - The fastest wiki and knowledge base for growing teams. Beautiful, feature rich, markdown compatible and open source.
  https://github.com/outline/outline
• Dapr - Portable, event-driven, runtime for building distributed applications across cloud and edge.
  https://github.com/dapr/dapr
• OpenTelemetry - Robust, portable telemetry a built-in feature of cloud-native software.
  https://opentelemetry.io/
• FLIF - Free Lossless Image Format
  https://flif.info/
• Bocker - Docker implemented in around 100 lines of bash
  https://github.com/p8952/bocker
• Rtty - Access your device's terminal from anywhere via the web.
  https://github.com/zhaojh329/rtty
• Heimdall - Self-hosted personal email guardian with one-step deployment
  https://github.com/fterh/heimdall
• 
  
  

Go Kütüphaneleri

• Stats - A well tested and comprehensive Golang statistics library package with no dependencies.
  https://github.com/montanaflynn/stats
• go-dexif - remove exif data fast
  https://github.com/xis/go-dexif
• govalidator - Package of validators and sanitizers for strings, numerics, slices and structs
  https://github.com/asaskevich/govalidator
• go-callvis - Visualize call graph of a Go program using dot (Graphviz)
  https://truefurby.github.io/go-callvis/
• Octosql - Query tool that allows you to join, analyse and transform data from multiple databases and file formats using SQL.
  https://github.com/cube2222/octosql
• GoJSONq - Simple Go package to Query over JSON/YAML/XML/CSV Data
  https://github.com/thedevsaddam/gojsonq
• tbls - CI-Friendly tool for document a database, written in Go.
  https://github.com/k1LoW/tbls
• Cob - Continuous Benchmark for Go Projects
  https://github.com/knqyf263/cob
• Gonet - Neural Network for Go.
  https://github.com/dathoangnd/gonet
• Xorm - Simple and Powerful ORM for Go, support mysql,postgres,tidb,sqlite3,mssql,oracle
  https://xorm.io/
• Evio - Fast event-loop networking for Go
  https://github.com/tidwall/evio
• Hover - Flutter on Windows, MacOS and Linux - based on Flutter Embedding, Go and GLFW.
  https://hover.build/
• Git-bug - Distributed, offline-first bug tracker embedded in git, with bridges
  https://github.com/MichaelMure/git-bug
• Ws - Tiny WebSocket library for Go.
  https://github.com/gobwas/ws
• Micro - A microservice runtime environment
  https://micro.mu/
• Go-Micro - A Go microservices development framework
  https://go-micro.dev/
• GoRush - A push notification server written in Go (Golang).
  https://github.com/appleboy/gorush
• MatterBridge - bridge between mattermost, IRC, gitter, xmpp, slack, discord, telegram, rocketchat, steam, twitch, ssh-chat, zulip, whatsapp, keybase, matrix and more with REST API
  https://github.com/42wim/matterbridge
• Noise - A decentralized P2P networking stack written in Go.
  https://github.com/perlin-network/noise
• Flaggy - Idiomatic Go input parsing with subcommands, positional values, and flags at any position. No required project or package layout and no external dependencies.
  https://github.com/integrii/flaggy
• Fn - The container native, cloud agnostic serverless platform.
  https://fnproject.io/
  

Haftanın Kitapları

• Pure Hash Bible - A collection of pure bash alternatives to external processes.
  https://github.com/dylanaraps/pure-bash-bible
• UNIX: A History and a Memoir
  https://www.amazon.com/gp/product/1695978552

Photo Credits:
Nasa Image of The Day - This Week in NASA History: 3rd Hubble Servicing Mission – Dec. 19, 1999

Haftanın Başlıkları

• Kubernetes Deployments: The Ultimate Guide
  https://semaphoreci.com/blog/kubernetes-deployment/
• How SAML 2.0 Authentication Works
  https://gravitational.com/blog/how-saml-authentication-works/
• What is Chaos Engineering?
  https://www.gremlin.com/chaos-engineering/
• How to Scan Docker Images for Vulnerabilities with Harbor
  https://thenewstack.io/how-to-scan-docker-images-for-vulnerabilities-with-harbor/
• HTTP Security Headers - A Complete Guide
  https://nullsweep.com/http-security-headers-a-complete-guide/
• How Uber, Facebook, and Netflix Do SSH
  https://gravitational.com/blog/how_uber_netflix_facebook_do_ssh/
• A History of Amazon Web Services (AWS)
  https://www.awsgeek.com/pages/AWS-History/
• How TCP segment size can affect application traffic flow
  https://medium.com/walmartlabs/how-tcp-segment-size-can-affect-application-traffic-flow-7bbceed5816e
• Dont Underestimate Grep Based Code Scanning
  https://littlemaninmyhead.wordpress.com/2019/08/04/dont-underestimate-grep-based-code-scanning/
• Seashells - lets you pipe output from command-line programs to the web in real-time, even without installing any new software on your machine.
  https://seashells.io/
• Osmedeus - Fully automated offensive security framework for reconnaissance and vulnerability scanning
  https://j3ssie.github.io/Osmedeus/
• Sandman2 - Automatically generate a RESTful API service for your legacy database. No code required!
  https://github.com/jeffknupp/sandman2
• Sherlock - Find usernames across social networks
  http://sherlock-project.github.io
• Comprehensive Python Cheatsheet
  https://gto76.github.io/python-cheatsheet/
• A brief history of Kubernetes, OpenShift, and IBM
  https://developer.ibm.com/blogs/a-brief-history-of-red-hat-openshift
• Building an auto-deployment pipeline using Jenkins and Ansible
  https://www.redhat.com/sysadmin/virtual-auto-deployment-pipeline
• Ansible Tower vs Ansible AWX for Automation
  https://4sysops.com/archives/ansible-tower-vs-ansible-awx-for-automation
• Kubernetes Web UIs in 2019
  https://srcco.de/posts/kubernetes-web-uis-in-2019.html
• JMAP - (JSON Meta Application Protocol) is a modern standard for email clients to connect to mail stores. It therefore primarily replaces IMAP + SMTP submission.
  https://jmap.io/
  https://tools.ietf.org/html/rfc8620
• 21st Century Datacenter Locations Driven by 19th Century Politics
  https://www.linkedin.com/pulse/21st-century-datacenter-locations-driven-19th-politics-george-moore/
• Distributed systems vocabulary.
  https://lethain.com/distributed-systems-vocabulary/
• Start Your Own ISP
  https://startyourownisp.com/
• Bringing Serverless to a Web Page Near you with Hugo & Kubernetes
  https://www.openfaas.com/blog/serverless-static-sites/
• Syslog : The Complete System Administrator Guide
  https://devconnected.com/syslog-the-complete-system-administrator-guide/
• Regex For Noobs (like me!) - An Illustrated Guide
  https://www.janmeppe.com/blog/regex-for-noobs/
• The Illustrated TLS Connection
  https://tls.ulfheim.net/
• Linux Observability with BPF
  https://blog.jessfraz.com/post/linux-observability-with-bpf
• Intro Guide to Dockerfile Best Practices
  https://blog.docker.com/2019/07/intro-guide-to-dockerfile-best-practices/
• Using AWK and R to parse 25tb
  https://livefreeordichotomize.com/2019/06/04/using_awk_and_r_to_parse_25tb/
• EOL Date - This site maintains quick links for checking End Of Life dates for various tools and technologies.
  https://endoflife.date/
• The Art of The Commandline - Master the command line, in one page
  https://github.com/jlevy/the-art-of-command-line
• Awesome Scalability - The Patterns of Scalable, Reliable, and Performant Large-Scale Systems
  http://backendhub.com
• 
  

Açık Kaynak Kodlu Projeler

• Brooklin - An extensible distributed system for reliable nearline data streaming at scale
  https://github.com/linkedin/Brooklin/
• SftpGo - Full featured and highly configurable SFTP server software
  https://github.com/drakkan/sftpgo
• Liftbridge - Lightweight, fault-tolerant message streams.
  https://github.com/liftbridge-io/liftbridge
• Tile38 - Geospatial database and realtime geofencing server.
  https://tile38.com/
• Imgproxy - Fast and secure standalone server for resizing and converting remote images
  https://github.com/imgproxy/imgproxy
• db.v3 - Productive data access layer for Go.
  https://upper.io/db.v3
• Lazydocker - The lazier way to manage everything docker
  https://github.com/jesseduffield/lazydocker
• u-root - A fully Go userland with Linux bootloaders! u-root can create a root file system (initramfs) containing a busybox-like set of tools written in Go.
  https://github.com/u-root/u-root
• hostyoself - Host yo' self from your browser, your phone, your toaster.
  https://github.com/schollz/hostyoself
• webssh - Web based ssh client
  https://webssh.huashengdun.org/
• Spack - A flexible package manager that supports multiple versions, configurations, platforms, and compilers.
  https://spack.io/
• ERPNext - Open Source ERP built for the web
  https://github.com/frappe/erpnext
• Searx - Search without being tracked.
  https://asciimoo.github.io/searx/
• DeeepFaceLab - A tool that utilizes machine learning to replace faces in videos.
  https://github.com/iperov/DeepFaceLab
• Finmarketpy - Python library for backtesting trading strategies & analyzing financial markets (formerly pythalesians)
  https://github.com/cuemacro/finmarketpy
• CTFd - Capture The Flag framework focusing on ease of use and customizability. It comes with everything you need to run a CTF and it's easy to customize with plugins and themes.
  https://ctfd.io/
• SmashTest - A language for rapidly describing and deploying test cases.
  https://smashtest.io/
• Sampler - A tool for shell commands execution, visualization and alerting. Configured with a simple YAML file.
  https://github.com/sqshq/sampler
• Hydra - OpenID Certified® OAuth 2.0 and OpenID Connect access control and API security for cloud native applications.
  https://gethydra.sh/
• Osmedeus - Fully automated offensive security framework for reconnaissance and vulnerability scanning
  https://j3ssie.github.io/Osmedeus/
• Commix Project - Automated All-in-One OS command injection and exploitation tool.
  https://commixproject.com
• V2Ray Project(Project V) - A set of tools to help you build your own privacy network over internet. The core of Project V, named V2Ray, is responsible for network protocols and communications. It can work alone, as well as combine with other tools.
  https://www.v2ray.com/en/index.html
• Multi-V2Ray - v2ray easy delpoy & manage tool， support multiple user & protocol manage
  https://github.com/Jrohy/multi-v2ray
• Oil Shell - a new Unix shell.
  http://www.oilshell.org/
• GoReleaser - A release automation tool for Go projects. The goal is to simplify the build, release and publish steps while providing variant customization options for all steps.
  https://goreleaser.com/
• SchemaHero - Kubernetes operator for declarative database schema management
  https://schemahero.io
• PortAuthority - API that leverages Clair to scan Docker Registries and Kubernetes Clusters for vulnerabilities
  https://github.com/target/portauthority
• Tern Project - Open Source compliance for containers
  https://github.com/vmware/tern
• CGX - CLI to Generate recommended documentation/files to improve contribution
  https://github.com/jeroenouw/cgx
• Singer - A high-performance, reliable and extensible logging agent for uploading data to Kafka, Pulsar, etc.
  https://github.com/pinterest/singer
• HAproxy Kubernetes Ingress - HAProxy ingress controller for K8s
  https://github.com/haproxytech/kubernetes-ingress
• Key Conjurer - Temporary Credential Service
  https://github.com/RiotGames/key-conjurer
• GoEBPF - Library to work with eBPF programs from Go
  https://github.com/dropbox/goebpf
• Script Go - Making it easy to write shell-like scripts in Go
  https://github.com/bitfield/script
• Octant - A web-based, highly extensible platform for developers to better understand the complexity of Kubernetes clusters.
  https://github.com/vmware/octant
• SSL Config Generator
  https://ssl-config.mozilla.org
• Rook - Open-Source, Cloud-Native Storage for Kubernetes
  https://rook.io/
• Longhorn - Cloud native distributed block storage built on and for Kubernetes
  https://github.com/longhorn/longhorn
• Monday - A dev tool for microservice developers to run local applications and/or forward others from/to Kubernetes SSH or TCP
  https://github.com/eko/monday
• Sampler - A tool for shell commands execution, visualization and alerting. Configured with a simple YAML file.
  https://sampler.dev
• Watson - A wonderful CLI to track your time!
  http://tailordev.github.io/Watson/
• Go-Micro - A microservice development framework
  https://github.com/micro/go-micro
• Listmonk - High performance, self-hosted newsletter and mailing list manager with a modern dashboard. Go + React.
  https://listmonk.app/
• SQLBoiler - Generate a Go ORM tailored to your database schema.
  https://github.com/volatiletech/sqlboiler
• KCP-go - A Crypto-Secure, Production-Grade Reliable-UDP Library for golang with FEC
  https://github.com/xtaci/kcp-go
• Atlantis - Terraform Pull Request Automation
  https://www.runatlantis.io/
• Vugu - Build a web front-end in Go that runs in your browser, today.
  https://www.vugu.org/
• Memguard - Secure software enclave for storage of sensitive information in memory.
  https://github.com/awnumar/memguard
• Werf - GitOps tool for implementing Continuous Integration and Continuous Delivery with Kubernetes
  https://werf.io/
• OctoSQL - A query tool that allows you to join, analyse and transform data from multiple databases and file formats using SQL.
  https://github.com/cube2222/octosql
• Weave Ignite - Open source Virtual Machine (VM) manager with a container UX and built-in GitOps management.
  https://github.com/weaveworks/ignite
• LinDB - A scalable, high performance, high availability distributed time series database.
  https://lindb.io/
• Kubecost - Cross-cloud cost allocation models for workloads running on Kubernetes
  https://kubecost.com/
• Yugabyte DB - Open source, high-performance, distributed SQL database for global, internet-scale apps.
  https://www.yugabyte.com/yugabytedb/
• ToxiProy - A TCP proxy to simulate network and system conditions for chaos and resiliency testing
  https://github.com/Shopify/toxiproxy
• The EKS Ephemeral Cluster Manager - Managing Amazon EKS clusters for development and test environments manually is boring.
  https://eksphemeral.info/
• Typhoon - A minimal and free Kubernetes distribution.
  https://typhoon.psdn.io/
• Kubectl Dig - Deep kubernetes visibility from the kubectl
  https://github.com/sysdiglabs/kubectl-dig
• Longhorn Engine - World's smallest storage controller
  https://github.com/longhorn/longhorn
• Kube Forwarder - Easy to use Kubernetes port forwarding manager
  https://kube-forwarder.pixelpoint.io
• 
  
  

Haftanın Videoları

• Programming Talks - Awesome & interesting talks about programming
  https://github.com/hellerve/programming-talks
• !!Con 2019 - Build your own virtual machine with /dev/kvm and Rust! by Josh Triplett
  https://www.youtube.com/watch?v=A_diEEpAfpM

Haftanın Kitapları

• BPF Performance Tools - Brendan Gregg
  https://www.amazon.com/gp/product/0136554822
• DevOps For Dummies (For Dummies (Computer/Tech))
  https://www.amazon.com/gp/product/B07VXMLK3J
• DevOps For Dummies, IBM Limited Edition
  https://www.ibm.com/developerworks/community/files/basic/anonymous/api/library/36ed35f5-2b62-4317-95eb-8cb3fdcfc10f/document/a1dd6f61-8e49-4aa0-813c-5512fee8f7d3/media
• 20 Patterns to Watch for in Your Engineering Team
  https://resources.gitprime.com/books/20-patterns

Photo Credits:
Russia's humanoid space robot Skybot F-850 - Roskosmos Space Agency(EPA-EFE)
https://www.roscosmos.ru/26743/

• PostgreSQL DBaaS Calculator
  https://barnabas.me/articles/postgres-dbaas.html
• Aroma: Using machine learning for code recommendation
  https://code.fb.com/developer-tools/aroma/
• Simple STONITH with ProxySQL and Orchestrator
  https://www.percona.com/blog/2019/04/02/simple-stonith-proxysql-orchestrator/
• Writing PostgreSQL Extensions is Fun – C Language
  https://www.percona.com/blog/2019/04/05/writing-postgresql-extensions-is-fun-c-language/
• How to Add More Nodes to an Existing ProxySQL Cluster
  https://www.percona.com/blog/2019/04/10/how-to-add-more-nodes-to-an-existing-proxysql-cluster/
• The History of Computer Data Storage, in Pictures
  https://royal.pingdom.com/the-history-of-computer-data-storage-in-pictures/
• First Aid Git - A searchable collection of the most frequently asker git questions
  http://firstaidgit.io
• PostgreSQL  - Don't Do This
  https://wiki.postgresql.org/wiki/Don%27t_Do_This
• HAProxy 2.0 Relased - HAProxy 2.0 and Beyond
  https://www.haproxy.com/blog/haproxy-2-0-and-beyond/
• Scaling Erlang Cluster to 10,000 Nodes / WhatsApp
  https://www.infoq.com/presentations/erland-scale-10000-nodes/
• Painting a Picture of Your Infrastructure in Minutes
  https://labs.spotify.com/2019/06/04/painting-a-picture-of-your-infrastructure-in-minutes/
• Linux Kernel Module Cheat
  https://github.com/cirosantilli/linux-kernel-module-cheat
  

Açık Kaynak Kodlu Projeler

• stolon - PostgreSQL cloud native High Availability
  https://github.com/sorintlab/stolon
• ImgProxy - Fast and secure standalone server for resizing and converting remote images
  https://github.com/imgproxy/imgproxy
• SQLBoilder - Generate a Go ORM tailored to your database schema.
  https://github.com/volatiletech/sqlboiler
• Molecule - Designed to aid in the development and testing of Ansible roles.
  https://molecule.readthedocs.io/en/stable/
• xg2xg - by ex-googlers, for ex-googlers - a lookup table of similar tech & services
  https://github.com/jhuangtw-dev/xg2xg
• SandStorm - Open source platform for self-hosting web apps
  https://sandstorm.io/
• Paperwork - OpenSource note-taking & archiving alternative to Evernote, Microsoft OneNote & Google Keep
  https://github.com/paperwork/paperwork
• Write-with-me - Real-time Collaborative Markdown Editor
  https://github.com/dabit3/write-with-me
• Sonic - Fast, lightweight & schema-less search backend. An alternative to Elasticsearch that runs on a few MBs of RAM.
  https://github.com/valeriansaliou/sonic
• VeoNim - Veonim is a simple modal IDE built on Neovim and VSCode extensions. The goal is to create my ideal programming environment
  https://github.com/veonim/veonim
• Maily - Rails Engine to preview emails in the browser
  https://github.com/markets/maily
• MongoKu - The Web-scale GUI for MongoDB
  https://github.com/huggingface/Mongoku
• Debezium - Stream changes from your databases.
  https://debezium.io/
• Tus - Open Protocol for Resumable File Uploads
  https://tus.io/
• CVE-Search - Tool to perform local searches for known vulnerabilities
  https://github.com/cve-search/cve-search
• Vibora - Fast, asynchronous and elegant Python web framework.
  https://github.com/vibora-io/vibora
• Mycli - A Terminal Client for MySQL with AutoCompletion and Syntax Highlighting.
  https://www.mycli.net/
• Pgcli - Command line interface for Postgres with auto-completion and syntax highlighting.
  https://www.pgcli.com/
• PINCE - A reverse engineering tool that'll supply the place of Cheat Engine for linux
  https://github.com/korcankaraokcu/PINCE
• Termshark - A terminal UI for tshark, inspired by Wireshark
  https://github.com/gcla/termshark
• SmallStep CLI - A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.
  https://smallstep.com/cli/
• Service-Tools - A growing collection of convenient little tools to work with systemd services
  https://github.com/muesli/service-tools
• WildDuck Mail Server -  Modern mail server software for IMAP and POP3. Modern being scalable, unicode-first and API-controlled.
  https://wildduck.email/
• MainFlux - Industrial IoT Messaging and Device Management Server
  https://www.mainflux.com/
• Awesome-WAF - Everything awesome about web-application firewalls (WAF).
  https://github.com/0xInfection/Awesome-WAF
• Terminus - A terminal for a more modern age
  https://eugeny.github.io/terminus/
• Cadence Workflow - Cadence is a distributed, scalable, durable, and highly available orchestration engine to execute asynchronous long-running business logic in a scalable and resilient way.
  https://cadenceworkflow.io/
• Pulumi - Create, deploy, and manage infrastructure on any cloud using your favorite language.
  https://pulumi.io/
• GoAlert - Provides on-call scheduling, automated escalations and notifications (like SMS or voice calls) to automatically engage the right person, the right way, and at the right time.
  https://goalert.me/
• Malcolm - Powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files) and Zeek logs.
  https://github.com/idaholab/Malcolm
• PyRobot - An Open Source Robotics Research Platform
  https://pyrobot.org/
• API Platform - REST and GraphQL framework to build modern API-driven projects
  https://api-platform.com/
• Yig - An open source object storage server with Amazon S3 compatible API
  https://github.com/journeymidnight/yig
• Mgmt - Next generation distributed, event-driven, parallel config management!
  https://github.com/purpleidea/mgmt
• Komiser - Cloud Environment Inspector
  https://komiser.io/
• GoPass - The slightly more awesome standard unix password manager for teams
  https://www.gopass.pw/
• MailHog - Web and API based SMTP testing
  https://github.com/mailhog/MailHog
• PSUtil - Cross-platform lib for process and system monitoring in Python
  https://github.com/giampaolo/psutil
  

Haftanın Kitapları

• Go101 - An online book focusing on Go syntax/semantics.
  https://go101.org
• SRE Best Practices for Incident Management
  https://www.gremlin.com/sre-best-practices-for-incident-management

Photo Credits:
Nasa Image of the Seeing the World With a Drone - https://www.nasa.gov/image-feature/seeing-the-world-with-a-drone

Haftanın Başlıkları

• The art of writing eBPF programs: a primer.
  https://sysdig.com/blog/the-art-of-writing-ebpf-programs-a-primer/
• Single-Node Kubernetes on Raspberry Pi with MicroK8s and Ubuntu
  https://blog.ubuntu.com/2019/02/27/single-node-kubernetes-on-raspberry-pi-microk8s-ubuntu
• Highly Available MySQL Clustering at WePay Using Orchestrator, Consul and HAProxy
  https://www.infoq.com/news/2019/02/mysql-clustering-wepay
• The best resources in Machine Learning & AI
  http://bestofml.com/
• The Missing Introduction To Containerization
  https://medium.com/devopslinks/the-missing-introduction-to-containerization-de1fbb73efc5
• Vertically Scaling PostgreSQL
  https://pgdash.io/blog/scaling-postgres.html
• Season of Docs - Fostering open source collaboration with technical writers.
  https://developers.google.com/season-of-docs/
• An introduction to Linux virtual interfaces: Tunnels
  https://developers.redhat.com/blog/2019/03/27/an-introduction-to-linux-virtual-interfaces-tunnels/
• 10 Docker Image Security Best Practices
  https://snyk.io/blog/10-docker-image-security-best-practices/
• How to build your own CDN with Kubernetes
  https://blog.insightdatascience.com/how-to-build-your-own-cdn-with-kubernetes-5cab00d5c258
• OWASP CheatSheetSeries - The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
  https://github.com/OWASP/CheatSheetSeries
• Game Programmer - A Study Path for Game Programmer
  https://github.com/miloyip/game-programmer

Açık Kaynak Uygulamalar

• GoRTR - The RPKI-to-Router server used at Cloudflare
  https://github.com/cloudflare/gortr
• Sysdig Inspect - Open Source System Capturing & Analysis.
  https://sysdig.com/opensource/inspect/
• K3S - Lighweight Kubernetes
  https://k3s.io/
• Orchestrator - MySQL replication topology management and HA
  https://github.com/GitHub/orchestrator
• NetworKit - Large-Scale Network Analysis — Interactive and Fast!
  https://networkit.github.io/
• Awesome Go Security - Dedicated place for cool golang security projects
  https://github.com/Binject/awesome-go-security
• Vita - Simple and fast VPN gateway
  https://github.com/inters/vita
• Code Server - Run VS Code remotely
  https://github.com/codercom/code-server
• htrace.sh - Swiss Army knife for http/https troubleshooting and profiling.
  https://github.com/trimstray/htrace.sh
• pgDash - In-Depth PostgreSQL Monitoring
  https://pgdash.io/
• ArchiveBox - Open source self-hosted web archive. Takes browser history/bookmarks/Pocket/Pinboard/etc., saves HTML, JS, PDFs, media, and more...
  https://github.com/pirate/ArchiveBox
• Python Examples
  https://github.com/geekcomputers/Python
• Mercure - Server-sent live updates: protocol and reference implementation
  https://github.com/dunglas/mercure
• CloudProber - Active monitoring software to detect failures before your customers do.
  https://cloudprober.org/
• Malcolm - A MITM (monster-in-the-middle) detection tool. Used to build MALCOLM
  https://malcolm.cloudflare.com/
• PostgreSQLTuner - Simple script to analyse your PostgreSQL database configuration, and give tuning advice
  https://github.com/jfcoz/postgresqltuner
• OpenDistro for ElasticSearch - Apache 2.0-licensed distribution of Elasticsearch enhanced with enterprise security, alerting, SQL, and more.
  https://opendistro.github.io
• Strap - Bootstrap your macOS development system.
  https://github.com/mikemcquaid/strap
• Radicle - A peer-to-peer stack for code collaboration
  http://www.radicle.xyz/
• chunkwm - tiling wm for macOS
  https://koekeishiya.github.io/chunkwm
• Peleton - Unified Resource Scheduler to co-schedule mixed types of workloads such as batch, stateless and stateful jobs in a single cluster for better resource utilization.
  https://github.com/uber/peloton
• SKM - A simple and powerful SSH keys manager
  https://timothyye.github.io/skm
• H2T - Scans a website and suggests security headers to apply
  https://github.com/gildasio/h2t
• Txeh - Go library and CLI utilty for /etc/hosts management.
  https://github.com/txn2/txeh
• FastAPI - Modern, fast (high-performance), web framework for building APIs with Python 3.6+ based on standard Python type hints.
  https://fastapi.tiangolo.com/
• RadonDB - Open source, cloud-native MySQL database for building global, scalable cloud services
  https://radondb.io/
• Katoolin - Automatically install all Kali linux tools
  https://github.com/LionSec/katoolin
• Instantbox - Get a clean, ready-to-go Linux box in seconds.
  https://github.com/instantbox/instantbox
• Awesome Linux Softwares - A list of awesome applications, software, tools and other materials for Linux distros.
  https://github.com/luong-komorebi/Awesome-Linux-Software
• DigitalOcean Netbox - IP address management (IPAM) and data center infrastructure management (DCIM) tool.
  https://github.com/digitalocean/netbox
• TikV - Distributed transactional key-value database. Based on the design of Google Spanner and HBase, but simpler to manage and without dependencies on any distributed filesystem
  https://tikv.org/
• DragonFly - An Open-source P2P-based Image and File Distribution System
  https://d7y.io
• Bench Scripts - A compilation of Linux server benchmarking scripts
  https://github.com/haydenjames/bench-scripts
• Alibaba Dragonwell8 JDK
  https://github.com/alibaba/dragonwell8
• ValuStor - Key-value pair database solution originally designed as an alternative to memcached.
  https://github.com/Sensaphone/ValuStor

Haftanın Kitapları

• A quickstart guide to Ansible
  https://opensource.com/article/19/2/quickstart-guide-ansible
• Python Data Science Handbook: full text in Jupyter Notebooks
  https://github.com/jakevdp/PythonDataScienceHandbook
• Best Deep Learning Books: Updated for 2019
  https://blog.floydhub.com/best-deep-learning-books-updated-for-2019/
• Pivotal - Shaun Norris DevOps Reading List
  https://content.pivotal.io/blog/my-devops-reading-list
• Linux Insides - A little bit about a linux kernel
  https://0xax.gitbooks.io/linux-insides/content/index.html
• Linux Observability with BPF
  https://www.oreilly.com/library/view/linux-observability-with/9781492050193/

Photo Credits:
THK SoloTürk General Dynamics F-16 Fighting Falcon

Haftanın Başlıkları

• A collection of awesome lists, manuals, blogs, hacks, one-liners, cli/web tools and more. Especially for System and Network Administrators, DevOps, Pentesters or Security Researchers.
  https://github.com/trimstray/the-book-of-secret-knowledge
• Everything you should know about certificates and PKI but are too afraid to ask
  https://smallstep.com/blog/everything-pki.html
• Building a Web App With Go, Gin and React
  https://hakaselogs.me/2018-04-20/building-a-web-app-with-go-gin-and-react/
• Build a DNS server in Golang
  https://medium.com/@owlwalks/build-a-dns-server-in-golang-fec346c42889
• How to Efficiently Compare Strings in Go
  https://blog.digitalocean.com/how-to-efficiently-compare-strings-in-go/
• Build and Deploy a secure REST API with Go, Postgresql, JWT and GORM
  https://medium.com/@adigunhammedolalekan/build-and-deploy-a-secure-rest-api-with-go-postgresql-jwt-and-gorm-6fadf3da505b
• FromXToGo - X lang to Go
  https://github.com/golang/go/wiki/FromXToGo
• Microservices and Availability
  http://kevinmahoney.co.uk/articles/microservices-and-availability/
• WebSockets - A Conceptual Deep-Dive
  https://www.ably.io/concepts/websockets
• What's in a Docker image?
  https://cameronlonsdale.com/2018/11/26/whats-in-a-docker-image/
• Overload control for scaling WeChat microservices
  https://blog.acolyer.org/2018/11/16/overload-control-for-scaling-wechat-microservices/
• Scaling engineering organizations from Stripe
  https://stripe.com/atlas/guides/scaling-eng
• flAWS  - AWS Security Challenge
  http://flaws.cloud/
• Firefox ProfileMaker
  https://ffprofile.com
• At 22 years old, Postgres might just be the most advanced database yet
  https://arcentry.com/blog/postgres-might-just-be-the-most-advanced-database-ever/#
• Jerry Hargrove - Cloud Diagrams & Notes
  https://www.awsgeek.com/
• Collection of awesome resources related to the yearly Advent of Code challenge.
  https://github.com/Bogdanp/awesome-advent-of-code
• Pritunl Cloud - Open source private cloud platform based on QEMU
  https://cloud.pritunl.com
• Nginx Quick Reference - These notes describes how to improve Nginx performance, security and other important things; @ssllabs A+ 100%.
  https://github.com/trimstray/nginx-quick-reference
• Build Your Own Text Editor
  https://viewsourcecode.org/snaptoken/kilo/
• The Internals of PostgreSQL
  http://www.interdb.jp/pg/index.html
• The Practical Linux Hardening Guide
  https://github.com/trimstray/the-practical-linux-hardening-guide
• Be careful of the JWT hype train
  https://dev.to/darraghor/be-careful-of-the-jwt-hype-train-3e81
• Vim Configuration Tutorial In 10 Minutes
  https://www.tutorialdocs.com/article/vim-configuration.html

Açık Kaynak Kodlu Uygulamalar

• OpsMop - Next generation config management and app deployment
  https://opsmop.io/
• Loki - Like Prometheus, but for logs.
  https://github.com/grafana/loki
• Pijul - free and open source (GPL2) distributed version control system.
  https://pijul.org/
• Netcap - Framework for secure and scalable network traffic analysis
  https://github.com/dreadl0ck/netcap
• ObjectBox - Object oriented database - up to 10x faster than SQLite
  https://objectbox.io/
• Gotify Server - REST-API for sending and receiving messages in real-time per web socket. (Includes a sleek web-ui)
  https://github.com/gotify/server
• Machinery - Asynchronous task queue/job queue based on distributed message passing.
  https://github.com/RichardKnop/machinery
• fastcache - fast thread-safe inmemory cache for big number of entries in Go
  https://github.com/VictoriaMetrics/fastcache
• GoBGP - BGP implemented in the Go Programming Language
  https://github.com/osrg/gobgp
• CrossPlane - The open source multicloud control plane.
  https://crossplane.io/
• EasyEngine - Creating a high traffic site, big enough to crash Nginx
  https://easyengine.io/
• DarkReader - https://darkreader.org/
  https://darkreader.org/
• GoLicense - Scan and analyze OSS dependencies and licenses from compiled Go binaries
  https://github.com/mitchellh/golicense
• WaterMill - Go library for building event-driven applications.
  https://watermill.io/
• GoAWK- an AWK interpreter written in Go
  https://github.com/benhoyt/goawk
• Pgweb - Cross-platform client for PostgreSQL databases
  http://sosedoff.github.io/pgweb/
• Airship Modules - Flexible Terraform templates help setting up your Docker Orchestration platform, 100% supported by Amazon
  https://airship.tf/
• Librefox - Firefox with privacy enhancements
  https://github.com/intika/Librefox
• Orbit-DB - Peer-to-Peer Databases for the Decentralized Web
  https://github.com/orbitdb/orbit-db
• DocUI - Tui client for Docker
  https://github.com/skanehira/docui
• goHackTools - Hacker tools on Go (Golang)
  https://github.com/dreddsa5dies/goHackTools
• VFlow - Enterprise Network Flow Collector (IPFIX, sFlow, Netflow) from Verizon Digital Media Services
  https://github.com/VerizonDigital/vflow
• Mockoon - Easiest and quickest way to run mock APIs locally. No remote deployment, no account required, open source.
  https://mockoon.com/
• CDS - Enterprise-Grade Continuous Delivery & DevOps Automation Open Source Platform
  https://ovh.github.io/cds/
• Space-Cloud - open source, high performance web service which provides instant Realtime APIs on the database of your choice.
  https://spaceuptech.com/
• BlazingSQL - BlazingSQL provides a simple SQL interface to ETL massive datasets into GPU memory for AI and Deep Learning workloads.
  https://blazingdb.com

Haftanın Sunumları

• So You Want to Be a Wizard ( SRECON )
  https://www.usenix.org/conference/srecon17americas/program/presentation/evans
  https://www.usenix.org/sites/default/files/conference/protected-files/srecon17_americas_slides_evans.pdf

Haftanın Kitapları

• The Book of Secret Knowledge - Collection of awesome lists, manuals, blogs, hacks, one-liners, cli/web tools and more. Especially for System and Network Administrators, DevOps, Pentesters or Security Researchers.
  https://github.com/trimstray/the-book-of-secret-knowledge
• Professional Software Development
  https://mixmastamyk.bitbucket.io/pro_soft_dev/index.html

Haftanın Videoları

• Intro to Go Modules and SemVer
  https://www.youtube.com/watch?v=aeF3l-zmPsY
• Hillel Wayne - Everything about distributed systems is terrible | Code Mesh LDN 18
  https://www.youtube.com/watch?v=tfnldxWlOhM

Photo Credits:
Nasa Image of the Day - SpaceX Demo-1: 'Go' for Launch
https://www.nasa.gov/image-feature/spacex-demo-1-go-for-launch

• Facebook open-sources new suite of Linux kernel components and tools
  https://code.fb.com/open-source/linux/
• Embracing failures and cutting infrastructure costs: Spot instances in Kubernetes
  https://learnk8s.io/blog/kubernetes-spot-instances
• PostgreSQL Performance Tuning Tutorial
  https://stackify.com/postgresql-performance-tutorial/
• Make Your Own CLI With Golang and Cobra
  https://ordina-jworks.github.io/development/2018/10/20/make-your-own-cli-with-golang-and-cobra.html
• Writing a Frontend Web Framework with WebAssembly And Go
  https://tutorialedge.net/golang/writing-frontend-web-framework-webassembly-go/
• An introduction to medieval cities and cloud security
  https://arcentry.com/blog/an-introduction-to-medieval-cities-and-cloud-security/
• Every service is an island
  https://deliveroo.engineering/2017/03/27/every-service-is-an-island.html
• MemSQL: Now Free to Use
  https://www.memsql.com/blog/announcing-memsql-free-tier/
• Introducing Multicluster-Controller
  https://admiralty.io/blog/introducing-multicluster-controller/
• Glass - ISC DHCP Server Interface
  https://github.com/Akkadius/glass-isc-dhcp

Açık Kaynak Kodlu Uygulamalar

• Gops - Tool to list and diagnose Go processes currently running on your system
  https://github.com/google/gops
• Naftis - Awesome dashboard for Istio built with love.
  https://github.com/XiaoMi/naftis
• Flux - The GitOps Kubernetes operator
  https://github.com/weaveworks/flux
• Sonobuoy - diagnostic tool that makes it easier to understand the state of a Kubernetes cluster by running a set of Kubernetes conformance tests in an accessible and non-destructive manner.
  https://github.com/heptio/sonobuoy
• Croc - Easily and securely send things from one computer to another
  https://github.com/schollz/croc
• Clash - Rule based proxy in Go.
  https://github.com/Dreamacro/clash
• Documize - Intelligent document environment (IDE) for authoring, tracking and delivering documentation -- everything you need in one place.
  https://github.com/documize/community
• Dive - Tool for exploring each layer in a docker image
  https://github.com/wagoodman/dive
• Stellar - Simplified Container System
  https://github.com/ehazlett/stellar
• Postgresql Anonymizer - Anonymizing and Masking Data with PostgreSQL
  https://gitlab.com/daamien/postgresql_anonymizer
• OpenBalena - Open source software to manage connected IoT devices
  https://www.balena.io/open/
• Flares - CloudFlare DNS backup tool
  https://github.com/lfaoro/flares
• Krs - Command line tool for capturing and serializing Kubernetes resource statistics in OpenMetrics format
  https://mhausenblas.info/krs/
• Gitbase - SQL database interface to Git repositories.
  https://docs.sourced.tech/gitbase
• Mage - Make/rake-like build tool using Go
  https://magefile.org/
• XSStrike - Most advanced XSS detection suite.
  http://xsstrike.tk/
• fx - Command-line JSON processing tool
  https://github.com/antonmedv/fx
• dank-selfhosted - Automated solution for hosting email, web, DNS, XMPP, and ZNC on OpenBSD.
  https://github.com/cullum/dank-selfhosted
• Tarantool - Get your data in RAM. Get compute close to data. Enjoy the performance.
  https://github.com/tarantool/tarantool
  https://tarantool.io/en/developers/
• Buttercup - The Password Manager You Deserve.
  https://buttercup.pw/

Haftanın Kitapları

• The Go Programming Language
  http://www.gopl.io/ - https://github.com/adonovan/gopl.io
• Go Project Design Documents
  https://github.com/golang/proposal
• Writing Network Drivers in Go
  https://www.net.in.tum.de/fileadmin/bibtex/publications/theses/2018-ixy-go.pdf

Haftanın Videoları

• Securing Your Go REST APIs with JSON Web Tokens(JWTS)
  https://www.youtube.com/watch?v=-Scg9INymBs

Photo Credits:
Nasa Image of the Day - SpaceX’s Crew Dragon Spacecraft and Falcon 9 Rocket
https://www.nasa.gov/image-feature/spacex-s-crew-dragon-spacecraft-and-falcon-9-rocket

• IBM to acquire Red Hat for $34 billion
  https://www.zdnet.com/article/ibm-acquires-red-hat/
• Booting a Custom Linux Kernel in QEMU and Debugging It With GDB
  http://nickdesaulniers.github.io/blog/2018/10/24/booting-a-custom-linux-kernel-in-qemu-and-debugging-it-with-gdb/
• Go Concurrency Patterns
  https://blog.afoolishmanifesto.com/posts/golang-concurrency-patterns/
• How to run Kafka on Openshift, the enterprise Kubernetes, with AMQ Streams
  https://developers.redhat.com/blog/2018/10/29/how-to-run-kafka-on-openshift-the-enterprise-kubernetes-with-amq-streams/
• Open-source hardware could defend against the next generation of hacking
  https://theconversation.com/open-source-hardware-could-defend-against-the-next-generation-of-hacking-104473
• Why you should use SQL CTEs
  https://dev.to/helenanders26/why-you-should-use-sql-ctes-25lk
• Monolith or Microservices?
  https://inconshreveable.com/10-07-2015/the-neomonolith/
• Web Performance 101
  https://3perf.com/talks/web-perf-101/
  

Açık Kaynak Kodlu Uygulamalar

• Podman - Manage pods, containers, and container images.
  https://podman.io/
• SDNS - Lightweight, fast recursive dns server with dnssec support
  https://github.com/semihalev/sdns
• MeQ - Modern messaging platform for Message Push、IM、Group Chatting、IoT etc
  http://mafanr.com/lab/meq
• Soar - SQL Optimizer And Rewriter (from Xiaomi)
  https://github.com/XiaoMi/soar
• AdGuardHome - Network-wide ads & trackers blocking DNS server
  https://github.com/AdguardTeam/AdGuardHome
• Mu - Full-stack DevOps on AWS framework
  https://getmu.io/
• Spatial - high-level language for programming accelerators
  https://spatial-lang.org/
• Amazon Web Services Explained in Illustrations
  https://www.awsgeek.com/
• Polar - Powerful offline browser for Mac, Windows, and Linux for managing all your web content, books, and notes.
  https://getpolarized.io/
• Monica - Personal CRM. Remember everything about your friends and family.
  https://github.com/monicahq/monica
• Gophish - Open-Source Phishing Toolkit
  https://getgophish.com/
• Kube-Prod-Runtime - Standard runtime environment for Kubernetes
  https://github.com/bitnami/kube-prod-runtime
• Vespene - Modern continuous integration, deployment, and self-service automation platform
  https://github.com/vespene-io/vespene

Kitaplar

• Computer Networking
  http://cnp3book.info.ucl.ac.be/
• The past present and future of go2
  https://dave.cheney.net/paste/the-past-present-and-future-of-go2.pdf

Photo Credits:
Nasa Image of The Day - Small Satellite Demonstrates Possible Solution for 'Space Junk'
https://www.nasa.gov/image-feature/researching-how-best-to-remove-space-junk

Photo Credits
Nasa Image of The Day - Uncrewed Japanese Vehicle Delivers Supplies to the Space Station
https://www.nasa.gov/image-feature/uncrewed-japanese-vehicle-delivers-supplies-to-the-space-station

Öncelikle bir özür borçluyum. 19 Temmuz'da yayınladığım alttaki anketin içeriği için bir kaç gün içinde yayınların başlayacağını söylemiştim. Malumunuz iş yoğunluğu ve önceliklerin değişmesi sebebiyle biraz ötelenmişti. Bu başlık ile "Sanallaştırma, Bulut Bilişim ve OpenStack" konularında güzel bir yazı dizisi başlamış olacak. Mümkün mertebe bildiklerimi, deneyimlerimi ve önemli bilgileri aktarmaya çalışacağım.

Hepimiz insanız, hatalı veya eksik olduğum noktalar olabileceğini düşünüyorum. Lütfen bu noktada yanlışlarımı düzeltmekten çekinmeyin:)

Sanallaştırma Nedir?

Bildiğiniz üzere hayatımıza bir süre önce bulut, sanal makine, sanallaştırma gibi kavramlar girdi. Esasen bu kelimeler ve dolayısıyla ilgili teknolojiler; mevcut ihtiyaçları karşılayamadığımızdan ziyade enerji verimliliği, trafik ve kaynak optimizasyonu ve maliyet-etkin kullanım gibi sebeplerden ötürü geliştirilmiş oldu.

Sanallaştırma öncesi, fiziksel sunucular tek başına kullanılırdı. Farklı servisler(uygulama, veritabanı, kuyruk, izleme vb.) ya aynı sunucuya kurulur yada farklı sunuculara kurularak kullanılırdı. Ancak yukarda saydığım 1-2 nedenden ötürü, zaten yıllar önce başlamış olan sanallaştırma teknolojileri son kullanıcıya kadar ulaşmış oldu.

Yukarda yer alan şemadan görebileceğiniz gibi "Geleneksel Mimari" olarak adlandırdığımız yapıda temel anlamda sırasıyla,
"Donanım ->İşletim Sistemi -> Uygulama" katmanları yer almaktadır. Uygulamanızı, donanım üzerine kurduğunuz işletim sistemi üzerinde ayağa kaldırırsınız. Kısa vadede geleneksel mimari işimizi çözse de, bir takım performans ve optimizasyon problemlerini beraberinde getirmektedir.

Uygulama sayınız arttıkça ve uygulamaya bağlı servislerin(veritabanı, önbellekleme, 3. parti servisler vb.) çoğalmasıyla birlikte, ya aynı fiziksel sunucuda servisleri konumlandırmak ya da ekstra fiziksel makine yatırımı yapmak zorundasınız.

Sanallaştırılmış altyapı ile sırasıyla "Donanım -> Hipervizör(*) -> İşletim Sistemleri(Sanal Makineler) -> Uygulamalar" katmanları yer almaktadır.

(*) Hipervizör: Sanallaştırma birimlerinde donanım kaynaklarını ayrıştıran çekirdek(yazılım) birimdir.

Birbirinden izole edilmiş bir yapıda sayısız(donanım limitleri ile sınırlı) sanal makine açabilmekte özgürüz. Bu sanal makineler kaynaklar(CPU, Memory, Disk, Network vb.) özelinde birbirinden ayrılmış ve gerçek bir işletim sistemi kurgusu ile çalışmaktadır.

Sanallaştırılmış altyapı aşağıdaki süreçleri genel olarak kapsamış oluyor.

• Donanım kaynaklarının sanallaştırılması.
  (CPU, Memory, Network, Storage)
• Sanallaştırılan kaynakların yeni sanal alt-sistemlere bölümlendirilmesi.
  (Virtual-Machine)
• Sanal sistemlerin yönetilmesi için gerekli arabirimlerin sağlanması.(VNC/Spice Console, API, Watchdog vb.)
• Sanallaştırma katmanında iyileştirme yaparak maksimum performansın sağlanması.
  (CPU Pinning, Over-Commit Memory, Over-Commit CPU, NUMA)
• Sanallaştırma katmanında veri ve iletişim optimizasyonlarının yapılması.
  (Clustered Filesystems, Bridge, WAN/LAN Optimization)
• Yazılım tanımlı sanal sistemlerin yönetimi.
  (SDS-Software-defined storage, SDN-Software-defined networking)

Sanallaştırma Kavramları

Sanallaştırma dünyasında karşımıza çıkacak başlıca birkaç terim var. Aslında bu liste çok kabarık, ama yazı dizisi devam ettikçe anlatmak istiyorum. Kafalar karışmasın :)

Hipervizör(Hypervisor)

• Donanım kaynaklarını sanallaştıran yazılım birimidir. (XEN, KVM, ESXi, Hyper-V vb.)
• Sanallaştırılan kaynaklar belirli formatlarla(XML, JSON) tutulur ve arabirimlere iletilir.
  Örnek senaryo(Pseudocode);

<machine>
    <name>machine01</name>
    <cpu_count>1</cpu_count>
    <memory>1024</memory>
    <disk>machine01.img</disk>
    <network>eth0</network>
</machine>

Konuk Sistem veya Sanal Makine(Virtual-Machine)
Hipervizör üzerinde sanallaştırılan her bir sanal sisteme verilen isimdir. Fiziksel makine gibi tüm kaynakları tanımlı bir işletim sistemini barındırır. Ancak her sanal makine kendisine tanımlı limitler ile çalışabilmektedir.
Bir önceki örnek senaryo kodunda yer alan sistem limitleri, sanal makine için gerçek kaynaklar olarak karşımıza çıkmaktadır. ISO yardımıyla yeni bir işletim sistemi kurabilir veya hazır bir Cloud imajı kullanabilirsiniz.

Sanalllaştırma Arabirimi
Sanallaştırılan kaynakların(CPU, Memory, Disk, Network) ve sanal makinelerin yönetimi için kullanılır. (OpenStack Horizon, Virt-Manager, VMware vSphere, XenCenter vb.)
İlgili uygulamalar kişisel bilgisayarınıza kurarak kullanabileceğiniz bir masaüstü uygulaması veya sunucuda çalışan bir web uygulaması olabilmektedir.
Sanallaştırma yazılımı geliştiren firmalar ve açık kaynak projeleri, çoklu platformda destek vermek yerine artık web uygulamaları geliştirmeye yönelmiş durumdalar.

Sanallaştırma Tipleri

Sanallaştırmayı bu aşamaya kadar çok basit anlattığımı düşünüyorum. Ancak bu aşamadan sonra işler biraz karışıyor. Çünkü işletim sistemleri çoğaldıkça, donanım üreticileri farklı cihazlar çıkardıkça ihtiyaçlar ve performans gereksinimleri de değişkenlik gösteriyor. Sanallaştırma tiplerini tam olarak anladığımızda, canlı ortamda(production) hangi sanallaştırma teknolojilerini kullanmamız gerektiğine karar verebileceğiz. Ancak sanallaştırma tiplerine geçmeden önce söylememiz gereken birkaç cümle daha bulunuyor.

Sanallaştırma; işletim sistemi, uygulamalar, işlem gücü(CPU-Memory), depolama veya ağın altında yatan donanım veya yazılımın soyutlaştırılmasından başka bir şey değildir. İşletim sistemlerinin izolasyonu için fiziksel donanımların yanılsaması oluşturulur. Son 10 yılda veri merkezleri sunucu, depolama üniteleri ve ağ anahtarları(switch-router) tarafından işgal edildi. Veri merkezlerinin enerji ve kullanım fazlası maliyetlerini düşürmek için sanıyorum ki daha fazla enerji sarf edilmiştir. Bu dönemde bir çok firma donanımların simülasyonu/emülasyonu üzerine ar-ge yapıyordu. Sorunlardan ortaya çıkan çözümler bizi günümüzdeki Container teknolojilerine kadar getirdi.

Konumuza dönecek olursak sanallaştırma tiplerinde çok fazla alt kırılım olduğunu söyleyebilirim. Ancak konumuzun şu aşamada "Sunucu Sanallaştırma" kısmını kapsadığını söylemek istiyorum.

Sunucu sanallaştırma tiplerini şöyle bir ağaç yapısı ile sıralayabiliriz; [1]

• Emülasyon / Tam Sanallaştırma
  • Yazılım Destekli Tam Sanallaştırma ( Software Assisted - Binary Translation )
  • Donanım Destekli Tam Sanallaştırma ( Hardware-assisted / Virtualization Technology )
    • Native ( Bare-Metal )
    • Hosted
• Kısmi Sanallaştırma ( Paravirtualization )
• Hibrit Kısmi Sanallaştırma ( Hybrid Paravirtualization )
• İşletim Sistemi Seviyesinde Sanallaştırma ( OS Level Virtualization )

Karmaşık geldiğinin farkındayım. Ancak hepsini sırasıyla açıklayacağım ve örnekler vereceğim. Şu aşamada hepsinin güncel BT dünyasında kullanıldığını unutmayın.

Önce şu aralar en bilindik olanından başlamak istiyorum. Tahmin edeceğiniz üzere, son yıllarda BT dünyasını kasıp kavuran bir sanallaştırma türü kendisi.

İşletim Sistemi Seviyesinde Sanallaştırma ( OS Level Virtualization )

İşletim sistemi seviyesinde sanallaştırma şu aralar yaygın olarak kullanılmakta. Siz bunu "Container" olarak biliyorsunuz. Sanallaştırma yapmak için kullandığınız işletim sistemi(host-machine), cgroups adını verdiğimiz bir yazılım ile birden çok kullanıcı alanı(user-space) tanımlamanıza izin verir. Bu kullanıcı alanlarında oluşturulan geçici disk birimleri ve işletim sistemi süreçleri(process) dolayısıyla işlem gücü(CPU) ve önbellek(Memory) kullanılır.

Bu sanallaştırma türü, diğer sanallaştırma tiplerinden biraz farklıdır. Sanallaştırılan alt sistemler(Container), çalıştırdıkları uygulamalar için, işletim sistemi çekirdeğine çok az(bazen hiç) yük bindirirler. Temel sebebi aslında, Container sadece süreçleri dolayısıyla uygulamaları ayağa kaldırırır. Mevcut sistem çağrıları(syscall) altta bulunan çekirdeğe iletilir.

Alt sistemler, mevcut işletim sistemi çekirdeğinin sistem çağrılarını(syscall) ve sürücülerini(device drivers) kullandıkları için birbirinden farklı işletim sisteminde kullanılamazlar.
Örnek vermek gerekirse, Microsoft Windows 10 işletim sistemi üzerinde doğrudan Docker veya LXC çalıştıramazsınız. Çünkü Windows işletim sistemi "Windows NT Kernel", Docker/LXC ise "Linux Kernel" kullanmaktadır.
"Ama Docker'ı Windows'a kurup çalıştırdık!" dediğinizi duyar gibiyim. Hemen cevabını vereyim. Docker'ı Windows'a kurarken yükleyici(installer) ekranlarında "Install a Virtualbox" veya "Boot2Docker" seçimini fark etmişsinizdir. Bunun manası şudur, Docker size Virtualbox adını verdiğimiz(sonraki aşamalarda bahsedeceğim) sanallaştırma aracında, geçici bir Linux işletim sistemi açar. Sizin açmak istediğiniz "Container" alt birimleri dolaylı olarak VirtualBox içindeki Boot2Docker linux işletim sistemi içinde çalıştırılır. Windows'ta yönettiğinizi zannettiğiniz şey(?) aslında linux içinde çalıştırılmaktadır.
Bu sanallaştırma tipine örnek olarak şu teknolojileri sıralayabiliriz;

• Docker
• LXC(LXD)
• OpenVZ
• Kata Containers

Yazılım Destekli Tam Sanallaştırma ( Software Assisted - Binary Translation )

Yazılım destekli tam sanallaştırma tipinde, sanal makineler işlemci gücünü kullanırken CPU'ya doğrudan erişemez. Kafa karışıklığına sebep olmadan şöyle açıklayayım; Örnek vermek gerekirse sanal makine içinde CPU kullanan(doğal olarak) bir uygulamanız var. Bu uygulama CPU'ya doğrudan iş gönderemediği için, işi ikili sistemde önce hipervizöre iletir. Hipervizöre iletilen ikili kodu donanımsal işlemciye iletilir. Yine işlenen veri, aynı yol üzerinden sanal makineye döner. Ancak tahmin edeceğiniz üzere performans kayıpları yaşanabilmektedir. Çünkü sanal makine üzerinde gerçekleştirdiğiniz her işlemci ilişkili süreç(process), yine kendi süreçleri için işlemciyi kullanan hipervizör ile birlikte donanımsal işlemciye ekstra yük getirmektedir. Bu sanallaştırma tipinde mevcut işlemci performansının %80-%95 civarı kullanılabilmektedir.
Bu sanallaştırma tipine örnek olarak şu teknolojileri sıralayabiliriz;

• VMware Workstation(32-Bit Sanal Makine)
• Microsoft Virtual PC
• Oracle VM VirtualBox(32-Bit Sanal Makine)
• VMware Server(artık yok.)

Donanım Destekli Tam Sanallaştırma ( Hardware-assisted / Virtualization Technology )

Donanım destekli sanallaştırma, bir önceki sanallaştırma tipinde bahsettiğimiz "Binary Translation" sürecine gerek kalmadan doğrudan fiziksel işlemciye erişerek gerçekleştirilen sanallaştırma tipidir. 2005 yılı itibariyle x86(64-bit) işlemcilerde sanallaştırmanın donanımsal olarak desteklenmesi(Hardware Acceleration) için eklentiler(CPU Extension) geliştirildi. Bu eklentiler işlemcinizde hazır olarak gelmektedir. Sanal makinenin CPU istekleri(interrupt) ve talimatları(instruction), hipervizörün tanımladığı CPU üzerindeki belli alanlarda yapılır. Bu sebeple yazılım destekli tam sanallaştırmaya göre daha performanslıdır ve daha çok tercih edilmektedir.

Bu sanallaştırma tipi de kendi içinde 2 farklı tipte(Bare-Metal, Hosted) ayrışmaktadır. Kullanılan uygulamalardan da anlayacağınız üzere, birinci tip doğrudan sunucuda kullanılmak üzere tüm sanallaştırma süreçlerinin hipervizör çekirdeği üzerinde gerçekleştiği, ikinci tip ise masaüstü vb. ortamlarda mevcut işletim sistemi üzerinde sanallaştırma yapabilmek için kullanılmaktadır.

Bilgisayarınızda veya sunucunuzda yer alan BIOS yazılımında Intel VT-x veya AMD-V özelliği açık değilse doğrudan yazılım destekli tam sanallaştırma kullanılır. Bu özellik açıldığında donanım destekli tam sanallaştırma kullanabilmektedir.

Bare-Metal ve Hosted'ın tam türkçe karşılığını bulamadığım için doğrudan aktardım.

Bare-Metal

Bare-Metal yapıda bir sanallaştırma kurgulamak istiyorsanız sunucuya doğrudan hipervizör olarak çalışan veya hipervizör özelliği bulunan bir çekirdeğe sahip işletim sistemi yüklemeniz gerekiyor. Bu işletim sistemi sadece hipervizörü yönetmek için kullanılmaktadır.
Bu sanallaştırma alt grubuna genellikle kurumsal ve büyük projelerde kullanılan aşağıdaki hipervizörleri örnek verebiliriz;

• VMware ESXi/ESX
• KVM(Linux Kernel, Solaris Zones)
• Microsoft Hyper-V
• XEN

Hosted

Hosted yapıda bir sanallaştırma kurgulamak istiyorsanız, yapmanız gereken tek şey destekleyen hipervizör yazılımlarından birini masaüstü-kişisel bilgisayarınıza kurmak.
Bu sanallaştırma alt grubuna örnek olarak aşağıdaki hipervizörleri örnek verebiliriz;

• VMware Workstation(64-Bit Sanal Makine)
• Oracle VM VirtualBox
• VMware Server(artık yok.)

Kısmi Sanallaştırma ( Paravirtualization )

Kısmi sanallaştırma, tam sanallaştırmadan biraz farklı çalışır. Sanal makineler için donanımı simüle etmenize gerek yoktur. Hipervizör yine fiziksel sunucuya kurulur, sanal makineler de yine bu hipervizör üzerinde konumlandırılır. Ancak bu sanallaştırma tipinde, sanal makineler -tam sanallaştırmanın aksine- sanallaştırıldığını doğrudan bilmektedir. Bunun amacı altta çalışan hipervizör aynı zamanda bir mikro-çekirdek çalıştırmaktadır. Bu nedenle donanımsal istekler(cpu, memory, network vb.) API vasıtasıyla hipervizör üzerindeki mikro-çekirdeğe oradan da donanımlara iletilir. İşletim sistemi seviyesinde sanallaştırmaya çok benzemekle birlikte, sanal makineler özelleştirilmiş çekirdek(kernel) sayesinde çalışabilmektedir. Diğer bir deyişle linux çekirdeği üzerindeki kısmi sanallaştırmada Windows NT tabanlı bir işletim sistemi kullanamazsınız.

Yukardaki şema XEN hipervizörünün hem tam sanallaştırma, hem de kısmi sanallaştırmayı nasıl desteklediğini anlamanıza yardımcı olacaktır. Windows ve Linux çekirdek seviyesinde mimari farklılığı nedeniyle, sanal makinede windows için kısmi sanallaştırma yapılamaz. Linux için ise çekirdek(kernel) üzerinde değişiklik sonrası, kısmi sanallaştırma yapılabilmektedir. VMware ESXi ise hiç bir işletim sistemi(linux, windows vb.) için kısmi sanallaştırma yapamamaktadır.
Bu sanallaştırma tipine örnek olarak şu teknolojileri sıralayabiliriz;

• XEN
• Oracle VM SPARC (LDOM)
• Oracle VM x86 (OVM)

Hibrit Kısmi Sanallaştırma ( Hybrid Paravirtualization )

Donanım destekli tam sanallaştırmada, daha önce de belirttiğim gibi sanal makineler üzerinde bir değişiklik yapılmasına gerek yoktur. Dolayısıyla fiziksel makinenin doğrudan(tanımlanan limitler ile) simülasyonu söz konusudur. Ancak bu durumda tüm bu yük hipervizör üzerinde kalmaktadır. Her ne kadar en performanslı sanallaştırma tipi donanım destekli tam sanallaştırma gibi gözükse de uzun vadede hibrit bir yapı gereksinimi ortaya çıkmıştır. Günümüzde bir çok donanım üreticisi bu hibrit yapı için doğrudan API desteği sunmaktadır. Aslında söz konusu hibrit yapı, tam sanallaştırma ile kısmi sanallaştırmanın ortak kullanımını özetlemektedir. Temel işlevler için için tam sanallaştırmayı, darboğaz yaşanabilecek işlevler için(özellikle I/O ve memory) kısmi sanallaştırmayı dolayısıyla üreticilerin sürücülerini ve API'lerini kullanırlar.

Yukardaki şema VMware ESXi hipervizörünün hem tam sanallaştırmayı hem de hibrit sanallaştırmayı nasıl desteklediğini anlamanıza yardımcı olacaktır.
Şemanın sol tarafında "Sockets API" görüyoruz. Tam sanallaştırma yapıldığında işletim sistemi kendisine tahsis edilmiş donanım kaynakları üzerinden ağ iletişimi(Sockets, TCP, IPv4, IPv6, Network Device) sağlıyor. Bu ağ iletişimi hipervizör üzerinde(linux-bridge veya software-switch) sonlanıp, sonrasında donanıma iletiliyor. Ancak bu durum hem sanal makine çekirdeği hem de yazılımsal olarak hipervizör üzerinde çalışan ToE(TCP-Offload-Engine) dolayısıyla fiziksel makinedeki işlemci için ekstra yük getiriyor. Her bir ağ hesaplaması CPU üzerinden geçerek gereksiz maliyetlere sebep olabiliyor.
Şemanın sağ tarafında kalan "RDMA Verbs API" kısmı incelersek, tam bu noktada bazı ağ kartı üreticileri ToE'yi ağ kartı üzerinde harici bir işlemcide çalıştırıyor. Sanal makine bu ağ kartına ulaşmak için kısmi sanallaştırmanın sağladığı(aslında üreticinin sağladığı API ile) sanal makinenin çekirdeğini atlayarak(kernel by-pass) doğrudan kart üzerindeki ToE birimine ulaşıyor. Hatta bir çok üretici kartı da sanallaştırmak üzere(SR-IOV, NPAR) bazı teknolojiler geliştirmiş durumda. Kartın fiziksel olarak diğer fiziksel cihazlarla sağlayabildiği trafik kapasitesinin(10GbE Throughput) yanında, sanal makinelerin kendi aralarında haberleşmesi için alt birimler(64x VMDq - Virtual Machine Device queue) oluşturabiliyor.[3]

Biraz kafalar karışmış olabilir, aşağıdaki video RDMA, ToE vb. süreçleri çok güzel anlatıyor.

Bu sanallaştırma tipine örnek olarak şu teknolojileri sıralayabiliriz;

• Oracle VM x86
• XEN
• VMware ESXi

Biraz bilgi karmaşası yaşamış olabileceğinizi düşünüyorum :) Merak ettiğiniz soru varsa bu başlık altında cevaplayacağım. Ayrıca yazı dizisinin devamından ve/veya genel olarak yazdıklarımdan haberdar olmak isterseniz, sitenin sağ tarafında bulunan "Newsletter"a e-posta adresinizi bırakabilirsiniz. Söz veriyorum istenmeyen e-posta almayacaksınız. :)

Bir sonraki yazımızda görüşmek dileğiyle.

Kaynaklar:
[1]: http://www.unixarena.com/2017/12/para-virtualization-full-virtualization-hardware-assisted-virtualization.html/
[2]: https://rhelblog.redhat.com/2015/07/29/architecting-containers-part-1-user-space-vs-kernel-space/
[3]: https://events.static.linuxfound.org/sites/events/files/slides/20160715_LinuxCon_sriov_final.pdf ( Sayfa 8, VMDq)

Photo Credits:
Hürjet  - Türk Havacılık Uzay Sanayii

Uzun bir süredir günlüğü devam ettiremiyorum. Artık daha düzenli ve periyodik hale getirmeyi planlıyorum.

Bu arada her ne kadar katılamamış olsam da Teknofest'i ilgiyle takip ettim. Atak helikopterlerine harmandalı bile oynatmışız :)
Gurur duydum!

• An Intensive Introduction to Cryptography
  https://intensecrypto.org/public/
• Coolstore Microservices
  https://github.com/vietnam-devs/coolstore-microservices
• WireMock - Mock your APIs for fast, robust and comprehensive testing
  http://wiremock.org
• SublimeMerge
  https://www.sublimemerge.com
• CLI: improved
  https://remysharp.com/2018/08/23/cli-improved
• What's in a Production Web Application?
  https://stephenmann.io/post/whats-in-a-production-web-application/
• Topsi - Project Manager
  https://github.com/Physiix/topsi-project-manager
• Nacos - easy-to-use dynamic service discovery, configuration and service management platform for building cloud native applications
  https://nacos.io
• Tabler - Free and open-source HTML Dashboard UI Kit built on Bootstrap 4
  https://github.com/tabler/tabler
• Zulip - Powerful open source team chat
  https://github.com/zulip/zulip
• Spectrum - Simple, powerful online communities.
  https://github.com/withspectrum/spectrum
• Marktext - Next generation markdown editor, running on platforms of MacOS Windows and Linux.
  https://marktext.github.io/website/
• Kaniko - Build Container Images In Kubernetes
  https://github.com/GoogleContainerTools/kaniko
• RealWorld Example Apps
  https://realworld.io/
• dqlite - Distributed SQLite for Go applications
  https://github.com/CanonicalLtd/dqlite
• rqlite - The lightweight, distributed relational database built on SQLite.
  https://github.com/rqlite/rqlite
• JsonStore.IO - Offers a free and secured JSON-based cloud datastore for small projects
  https://github.com/bluzi/jsonstore
• Kubernetes Security - Best Practice Guide
  https://github.com/freach/kubernetes-security-best-practice
• Awesome Podcasts - Collection of awesome podcasts
  https://github.com/rShetty/awesome-podcasts
• LWAN - High-Performance & scalable web server.
  https://lwan.ws/
• Bender -  Easy-to-use library for creating load testing applications
  https://github.com/pinterest/bender
• Emitter - Real-time communication service for connecting online devices. High performance, distributed and low latency publish-subscribe platform.
  https://emitter.io/
• CovenantSQL - a SQL Database with Blockchain features
  https://covenantsql.io/
• Sqoop - GraphQL for Monolith, Microservices and Serverless
  https://qloo.solo.io/
• Noti - Monitor a process and trigger a notification.
  https://github.com/variadico/noti
• ResinOS - Run Docker containers on embedded devices
  https://resinos.io/
• Vegeta - HTTP load testing tool and library.
  https://github.com/tsenart/vegeta
• Harbor - Manage and serve container images in a secure environment
  https://goharbor.io/
• Colly - Fast and Elegant Scraping Framework for Gophers
  http://go-colly.org/
• sandmap - tool supporting network and system reconnaissance using the massive Nmap engine.
  https://github.com/trimstray/sandmap
• Stolon - PostgreSQL cloud native High Availability
  https://github.com/sorintlab/stolon
• Cortex - Open source, horizontally scalable, multi-tenant Prometheus as a service
  https://github.com/cortexproject/cortex
• Kache - Simple in memory cache written using go
  http://kasvith.me/kache/
• GNTE - Simple Global Network Topology Emulator
  https://github.com/CovenantSQL/GNTE
• Rancher OS - Tiny Linux distro that runs the entire OS as Docker containers
  http://docs.rancher.com/os/
• Realize - Enhance your workflow by automating the most common tasks and using the best performing Golang live reloading.
  https://gorealize.io/
• OVPM - OpenVPN Management Server - Effortless and free OpenVPN server administration
  https://github.com/cad/ovpm
• Benthos - Dull, resilient and quick to deploy stream processor
  https://github.com/Jeffail/benthos
• Goofys - High-performance, POSIX-ish Amazon S3 file system written in Go
  https://github.com/kahing/goofys
• Heighliner - Github Flow for Kubernetes - Open a Pull Request or create a Release to automatically build and deploy a service
  https://heighliner.com/
• Magma Daemon - Encrypted email system with support for SMTP, POP, IMAP, HTTP and MOLTEN.
  https://magmadaemon.org/
• 100 Days of ML Coding
  https://github.com/Avik-Jain/100-Days-Of-ML-Code
• Quick & smart charting for STDIN
  https://github.com/marianogappa/chart
• Devilbox - Reproducable and identical development environment for all host operating systems with zero configuration requirements.
  http://devilbox.org/
• BYOB - Build Your Own Botnet
  https://github.com/malwaredllc/byob
• Terminalizer - Record your terminal and generate animated gif images
  https://github.com/faressoft/terminalizer
• Glances - Cross-platform system monitoring(htop/top alternative) tool written in Python.
  https://nicolargo.github.io/glances/

Photo Credits:
Teknofest - Atak Harmandalı :)

• 

  Kubernetes January Round Up
  https://www.hidefsoftware.co.uk/2018/02/02/kubernetes-january-round-up/

• 12 best practices for user account, authorization and password management
  https://cloudplatform.googleblog.com/2018/01/12-best-practices-for-user-account.html

• Grv - terminal interface for viewing git repositories
  https://github.com/rgburke/grv

• Tandem - Decentralized, cross-editor, collaborative text-editing
  http://typeintandem.com

• Nuster - Web caching proxy server based on HAProxy
  https://github.com/jiangwenyuan/nuster

• Gorsk - Idiomatic Golang Restful Starter Kit
  https://github.com/ribice/gorsk

• jackal - An XMPP server written in Go.
  https://github.com/ortuman/jackal

• Operos - Linux-based operating system that brings hyperscaler-grade infrastructure automation to organizations of all sizes
  https://www.paxautoma.com/operos/

• Daptin - A developer oriented CMS
  https://dapt.in/

• Queryparser - Open Source Tool for Parsing and Analyzing SQL
  https://eng.uber.com/queryparser/

• Kubernetes 101: Pods, Nodes, Containers, and Clusters
  https://medium.com/google-cloud/kubernetes-101-pods-nodes-containers-and-clusters-c1509e409e16

• PgMetrics - Easily collect and report PostgreSQL metrics for scripting, automation and troubleshooting.
  https://pgmetrics.io/

• Komiser - AWS Environment Inspector
  https://github.com/mlabouardy/komiser

• Gitkube - Build and deploy docker images to Kubernetes using git push.
  https://gitkube.sh

• Redis Graph - Graph database module for Redis
  http://redisgraph.io

• Emitter - real-time communication service for connecting online devices. The Publish-Subscribe messaging API is built for speed and security.
  https://emitter.io/

• Acrn - A Big Little Hypervisor for IoT Development
  https://projectacrn.org/

• fselect - Find files with SQL-like queries
  https://github.com/jhspetersson/fselect

• Cri-o - Open Container Initiative-based implementation of Kubernetes Container Runtime Interface
  https://github.com/kubernetes-incubator/cri-o

• Gocho - Local area network file-sharing application with nodes auto-discovery
  https://github.com/donkeysharp/gocho

• DNSCrypt Proxy - A flexible DNS proxy, with support for encrypted DNS protocols.
  https://dnscrypt.info

• exabgp - The BGP swiss army knife of networking
  https://github.com/Exa-Networks/exabgp

• katran - A high performance layer 4 load balancer
  https://github.com/facebookincubator/katran

• Infection Monkey - An automated pentest tool
  https://github.com/guardicore/monkey

• aptomi - Application delivery engine for k8s
  http://aptomi.io

Kitaplar

• The Erlang Runtime System
  https://happi.github.io/theBeamBook/

Photo Credits:
Nasa Image of The Day - Parker Solar Probe Launches to "Touch the Sun"
https://www.nasa.gov/image-feature/parker-solar-probe-launches-to-touch-the-sun

• 

  DevilBox - Modern and highly customisable LAMP and MEAN stack replacement based purely on docker and docker-compose running on all major platforms.
  http://devilbox.org/

• ContainerDNS - Full cache DNS for kubernetes
  https://github.com/tiglabs/containerdns

• Checkup - Simple uptime monitoring
  https://sourcegraph.github.io/checkup/

• SpaceVim - A community-driven vim distribution
  https://spacevim.org/

• Bistro - Toolkit for making services that schedule and execute tasks.
  https://facebook.github.io/bistro/

• Apache Trafodion - Transactional SQL-on-Hadoop Database
  http://trafodion.apache.org/

• CNI - Container Network Interface - networking for Linux containers
  https://github.com/containernetworking/cni

• Contiv - The Most Powerful Open Source Container Networking
  http://contiv.github.io/

• Cilium - API-aware Networking and Security for Containers based on BPF
  https://github.com/cilium/cilium

• Multus(a.k.a Multus-CNI) -
  https://github.com/Intel-Corp/multus-cni

• OpenTracing - A vendor-neutral open standard for distributed tracing.
  http://opentracing.io/

• Prometheus - Power your metrics and alerting with a leading open-source monitoring solution.
  https://prometheus.io/

• Fireworq - Lightweight, high-performance, language-independent job queue system.
  https://github.com/fireworq/fireworq

• Kubernator - Alternative Kubernetes UI
  https://github.com/smpio/kubernator

• Scaling the GitLab database
  https://medium.com/@gitlab/scaling-the-gitlab-database-c0972da3c754

• How to design a RESTful API architecture from a human-language spec
  https://www.oreilly.com/learning/how-to-design-a-restful-api-architecture-from-a-human-language-spec

• Kata Containers
  https://katacontainers.io/

• httplive - HTTP Request & Response Service, Mock HTTP
  https://github.com/gencebay/httplive

• php-pm - Process manager, supercharger and load balancer for modern PHP applications.
  https://github.com/php-pm/php-pm

• Istio - Open platform to connect, manage, and secure microservices
  https://istio.io/

• Kubeapps - Super-charge your Kubernetes cluster
  https://kubeapps.com/

• The Unofficial MySQL 8.0 Optimizer Guide
  http://www.unofficialmysqlguide.com/index.html

• Zeebee - Microservice Orchestration Engine
  https://zeebe.io/

• PAST: Platform-Agnostic Security Tokens
  https://github.com/paragonie/past

• Antibody - The fastest shell plugin manager.
  http://getantibody.github.io

• Advanced-SSH-Config - Make your ssh client smarter
  https://github.com/moul/advanced-ssh-config

• Nginx Config Generator
  https://nginxconfig.io/

• On setting up highly available Kubernetes clusters
  https://elastisys.com/2018/01/25/setting-highly-available-kubernetes-clusters/

• How to record SSH sessions with OpenSSH servers
  https://gravitational.com/blog/how-to-record-ssh-sessions/

• Kubernetes for dev infrastructure
  https://hackernoon.com/kubernetes-for-dev-infrastructure-40b9175cb8c0

• Awesome Scalability, Availability, and Stability Back-end Design Patterns
  https://github.com/binhnguyennus/awesome-scalability

• A minimalist guide to tmux
  https://medium.com/actualize-network/a-minimalist-guide-to-tmux-13675fb160fa

Kitaplar

• 10 Must Read Books For Every Micro Services And Cloud Native Professional
  http://techprehension.com/2018/01/21/10-must-read-books-for-every-micro-services-and-cloud-native-professional/

Photo Credits:
Nasa Image of The Day - Saying Goodnight
https://www.nasa.gov/image-feature/saying-goodnight

Uzun bir aradan sonra tekrar devam ediyoruz.

• Microservices are hard — an invaluable guide to microservices.
  https://hackernoon.com/microservices-are-hard-an-invaluable-guide-to-microservices-2d06bd7bcf5d

• Telepresence - Fast, Realistic, Development for kubernetes and openshift microservices
  https://www.telepresence.io/

• Envoy - Open source edge and service proxy, designed for cloud-native applications
  https://www.envoyproxy.io/

• Forge - Define and run multi-container apps in Kubernetes, from source
  https://forge.sh/

• Ambassador - Kubernetes-native api gateway for microservices built on the envoy proxy
  https://www.getambassador.io/

• A Minimalist Guide to SQLite
  http://tech.marksblogg.com/sqlite3-tutorial-and-guide.html

• Infinit - Open-source decentralized software-based storage platform for modern environments.
  https://infinit.sh/

• Cabot - Self-hosted, easily-deployable monitoring and alerts service - like a lightweight PagerDuty
  https://github.com/arachnys/cabot

• Wekan - The open-source Trello-like kanban.
  https://wekan.github.io/

• CoreDNS - DNS and Service Discovery
  https://coredns.io/

• Muguet - DNS Server & Reverse proxy for Docker - Compatible with docker-compose, boot2docker and docker-machine
  https://github.com/mattallty/muguet

• Fabio - Fast, modern, zero-conf load balancing HTTP(S) router for deploying microservices managed by consul.
  https://github.com/fabiolb/fabio

• SophiMail - Postfix Installer, Webadmin and Dashboard
  https://github.com/sophimail/webadmin

• fnProject - The container native, cloud agnostic serverless platform.
  http://fnproject.io/

• Tsuru - Extensible and open source Platform as a Service software.
  https://tsuru.io/

• MySQL vs. MariaDB: Reality Check
  https://www.percona.com/blog/2017/11/02/mysql-vs-mariadb-reality-check/

• Atom Teletype - Collaborate in real time in Atom
  https://teletype.atom.io/

• A Great Vim Cheat Sheet
  http://vimsheet.com/index.html

• The Twelve-Factor App Guide
  https://12factor.net/

• GitFS
  https://www.presslabs.com/gitfs/

• AWS just announced a move from Xen towards KVM. So what is KVM?
  https://medium.com/@dbclin/aws-just-announced-a-move-from-xen-towards-kvm-so-what-is-kvm-2091f123991

• Scaling Postgres with Read Replicas & Using WAL to Counter Stale Reads
  https://brandur.org/postgres-reads

• container-diff - Diff your Docker containers
  https://github.com/GoogleCloudPlatform/container-diff

• LetsEncrypt with HAProxy
  https://serversforhackers.com/c/letsencrypt-with-haproxy

• minikube - Run Kubernetes locally
  https://github.com/kubernetes/minikube

• MyRocks - RocksDB storage engine with MySQL
  http://myrocks.io/

• The Power Of tmux Hooks
  https://devel.tech/tips/n/tMuXz2lj/the-power-of-tmux-hooks/

• AntidoteDB - Planet-scale, available, transactional database with strong semantics
  http://syncfree.github.io/antidote/

• Conduit - Next-generation ultralight service mesh for Kubernetes.
  https://conduit.io/

• Sandglass - Sandglass is a distributed, horizontally scalable, persistent, time sorted message queue.
  https://github.com/celrenheit/sandglass

• Skydive - Open source real-time network topology and protocols analyzer
  https://github.com/skydive-project/skydive

• Kubernetes Best Practices
  https://speakerdeck.com/thesandlord/kubernetes-best-practices

• Uber's open source technology stack
  https://www.findbestopensource.com/stack-detail/uber-technology-stack

• Clusto - Datacenter-aware cluster management tool.
  https://github.com/clusto/clusto

• ishtargate - Contextual Network Templating Engine
  https://github.com/sabey/ishtargate

• DockerSlim - Optimize and secure your Docker containers
  http://dockersl.im/

• GoCD - Simplify Continuous Delivery
  https://www.gocd.org/

• Joplin - Open source note taking and to-do application with synchronisation capabilities.
  http://joplin.cozic.net/

Books

• Mastering PostgreSQL in Application Development
  https://masteringpostgresql.com/
• Go Systems Programming: Master Linux and Unix system level programming with Go
  https://www.amazon.co.uk/Go-Systems-Programming-Master-programming-ebook/dp/B0718WWM6Y

Photo Credits:
Nasa Image of The Day - Star Wanders Too Close to a Black Hole
https://www.nasa.gov/image-feature/star-wanders-too-close-to-a-black-hole

Sunum